» rfusclient.exe
Overview
Analysis
File Details

rfusclient.exe

Remote Utilities

Usoris Systems LLC

The application rfusclient.exe by Usoris Systems has been detected as a potentially unwanted program by 4 anti-malware scanners.

File name:

rfusclient.exe

Publisher:

Usoris Systems LLC (signed and verified)

Product:

Remote Utilities

Version:

5.4.0.1

MD5:

3aedc78a0abec7f0d2725c41054f5fb7

SHA-1:

c76bfb142824facb3883755d1a95df9e6a21da54

SHA-256:

06852e5f5a57ef0d826a9d96b101a69322e406967469932ff2d62c38cbf1f64f

Scanner detections:

4 / 68

Status:

Potentially unwanted

Analysis date:

4/26/2024 3:31:49 PM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Riskware.RemoteAdmin.DI

7.1.1

Avira AntiVirus

APPL/MonitorTool.Gen

7.11.177.204

Clam AntiVirus

Win.Trojan.Rfusclient

0.98/19507

ESET NOD32

probably Win32/RemoteAdmin.RemoteUtilities.A potentially unsafe application

7.0.302.0

File size:

3.9 MB (4,112,224 bytes)

Product version:

5.4.0.1

Trademarks:

Usoris Systems LLC, Remote Utilities

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\remote utilities - host\rfusclient.exe

Digital Signature

Signed by:

Usoris Systems LLC

Authority:

DigiCert Inc

Valid from:

10/17/2012 2:00:00 AM

Valid to:

1/2/2014 1:00:00 PM

Subject:

CN=Usoris Systems LLC, O=Usoris Systems LLC, L=Victoria, S=Mahe, C=SC

Issuer:

CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0E2B613069249FF447DA41815260C2FD

File PE Metadata

Compilation timestamp:

1/7/2013 9:08:15 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:8p/xgiFwzUNXQsIrSQNqLX9eYHsuzcV6AdhfWHTOcFTATdp16npDPRNddxmG:8p5ge2IO6AdhfWH6EpwG

Entry address:

0x30BBB8

Entry point:

55, 8B, EC, 83, C4, F0, 53, B8, 4C, 74, 6F, 00, E8, BB, 03, D0, FF, 8B, 1D, F0, 1F, 72, 00, A1, 08, 19, 72, 00, 83, 38, 06, 7C, 05, E8, 22, 59, D0, FF, E8, 19, B8, FE, FF, 8B, 03, B2, 01, E8, 0C, DC, E5, FF, 8B, 03, E8, E5, BE, E5, FF, 8B, 03, BA, 58, BC, 70, 00, E8, D1, B8, E5, FF, 8B, 03, C6, 40, 5F, 00, 8B, 0D, 00, 1C, 72, 00, 8B, 03, 8B, 15, 94, DC, 6E, 00, E8, D8, BE, E5, FF, 8B, 0D, 88, 1C, 72, 00, 8B, 03, 8B, 15, D0, DE, 65, 00, E8, C5, BE, E5, FF, 8B, 0D, 18, 26, 72, 00, 8B, 03, 8B, 15, 38, E5, 69... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

3 MB (3,189,248 bytes)

Remove rfusclient.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.